Security is not a feature.
It is how we build.
When you hand us access to financial data, you're placing trust in our infrastructure. We take that seriously and we build accordingly.
Our Principles
Built on three foundations
Data Sovereignty
Your financial data is processed and stored exclusively in EU data centers. It never leaves the EU and is never shared between customers.
Zero Trust Architecture
No implicit trust at any layer. Every request is authenticated and authorized. Tenant data is strictly isolated in dedicated environments.
Full Transparency
Every agent action generates an immutable audit log. Your team can trace exactly what the system did, why, and when, for any finding.
Implementation
Security controls
Encryption at Rest
AES-256 encryption for all stored data
Encryption in Transit
TLS 1.3 for all data in motion
Tenant Isolation
Dedicated environments per customer
Access Controls
Role-based access with MFA requirement
Audit Logging
Immutable logs for all agent actions
Secure Development
Dependency scanning, code review gates
Compliance
GDPR & EU data residency
KA Labs AS is incorporated in Norway and operates under EU/EEA data protection law. All customer data is processed and stored within EU data centers. We do not transfer personal or financial data outside the EU.
We are committed to full compliance with the General Data Protection Regulation (GDPR). A Data Processing Agreement (DPA) is available upon request and required for all enterprise customers.
Complaints may be directed to Datatilsynet (the Norwegian Data Protection Authority). Security questions and GDPR requests can be sent to [email protected].
Incident Response Commitment
In the event of a security incident affecting customer data, we commit to notifying affected customers within 72 hours of discovery, in compliance with GDPR Article 33 requirements.
Our security contact is [email protected]. For responsible disclosure of potential vulnerabilities, please use the same address.
Have security questions?
Our team is happy to walk through our security architecture in detail. Reach out at [email protected] or send us a message.
Contact us